The latest threat report from Kaspersky suggests hard drives may have been spying on us for more than a decade. Infiltrating storage devices is just one component of the Equation Group, a "threat actor that surpasses anything known in terms of complexity and sophistication of techniques." The depressing news is outlined in this blog post by the security company.
According to the firm, the Equation Group comprises at least six trojans dating back to 2001. Systems have been infiltrated in over 30 countries, Kaspersky says, and some elements of the group likely remain undiscovered. "Solid links" also tie the Equation Group to Stuxnet and Flame trojans.
The Equation Group's capabilities reportedly include reprogramming the firmware of hard drives from every major brand. Once infected, drives can create hidden partitions, store data for future retrieval, prevent data from being deleted, and alter data that's being accessed. At least one of the trojans can potentially snoop passwords associated with full-disk encryption, as well. And, as if that weren't bad enough, it's basically impossible to determine whether a drive has been affected.
One of the trojans is designed to compromise machines that aren't connected to the Internet. It hides on USB flash drives, has the same hidden partition mojo, and can report back to the mothership when network conditions allow.
Although there's no mention of similar trojans for SSDs, anyone targeting mechanical storage probably isn't ignoring the solid-state alternatives. The entity behind the Equation Group appears to have sufficient resources and expertise to get into whatever it wants. More details are available in this SecureList post and this Q&A document (PDF).
|Lenovo ThinkCentre and ThinkPad machines pack AMD PRO APUs||19|
|Seagate 5TB BarraCuda and 2TB FireCuda drives are big and speedy||11|
|Nvidia licenses Rambus' DPA tech for side-channel data leak prevention||15|
|iOS 10.1 update includes portrait mode beta for iPhone 7 Plus||5|
|Biostar belatedly announces GTX 1060 graphics cards||12|
|HyperX Alloy keyboard gets lean and mean for FPS gaming||8|
|AMD drops prices on the Radeon RX 460 and RX 470||51|
|Reports: Radeon RX 470D is a budget Polaris card for China||9|
|Examining reports of slow write speeds on the 32GB iPhone 7||33|
|Signing your posts is daftly redundant. Meadows||+27|